AppSecNews

SAST

Static Application Security Testing

Analyze source code or bytecode for vulnerable patterns without running the application.

31 tools profiled

How it differs Reads the code you wrote without running it. SCA checks the third party packages you depend on; IAST watches the running app while your tests exercise it.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Docker Clear all

  • Bearer

    Bearer (Cycode)

    SAST

    A static analyzer that classifies sensitive data in code and reports where it flows, joining security findings to privacy and compliance concerns.

    Open source
    Growing

  • Horusec

    Zup Innovation

    SAST

    An open-source CLI that orchestrates a set of language-specific security scanners in containers and merges their findings into one report.

    Open source
    Established

  • Bearer

    Bearer (Cycode)

    A static analyzer that classifies sensitive data in code and reports where it flows, joining security findings to privacy and compliance concerns.

    Open source Growing
    SAST

  • Horusec

    Zup Innovation

    An open-source CLI that orchestrates a set of language-specific security scanners in containers and merges their findings into one report.

    Open source Established
    SAST
Tick up to 4 tools above.